Privacy policy

Last update: August 20, 2022

Orma exists to help giving back to the cities and make traveling more meaningful and impactful. In short — to leave a city better than how travelers found it. We are a community built on trust. A fundamental part of earning that trust means being clear about how we use your information and protecting your human right to privacy.

In this Privacy Policy we explain how and why Orma collects and collectes personal data originating from you, whereby Orma is acting in its role as controller. With regard to the collecting of personal data, Orma complies with applicable legislation and regulations, such as the General Data Protection Regulation (GDPR art. 13 Reg. 2016/679/UE), and the Italian GDPR Execution Act (D.lgs. n. 196 del 30 June 2003).
We have created the following Privacy Policy which applies at all times when using our Application / website and / or any of our services. Any new features and/or services that are added to our current service at any point in the future shall also be subject to the terms set out in this Privacy Policy.

We have created the following Privacy Policy which applies at all times when using our Application / website and / or any of our services. Any new features and/or services that are added to our current service at any point in the future shall also be subject to the terms set out in this Privacy Policy.

Cities offer unique and memorable experiences
Travelers offer their time and energy for the betterment of cities



Orma  (from here on referred to as "Orma", "we", "us" or "our") provides this Privacy Policy to inform you of our policies and procedures regarding how we collect and collect the personal data that we receive from users of (the "Site"), our services and our application for mobile devices (the "Application") regardless of how you use or access them. Personal data is any information that directly or indirectly identifies you. ‘Directly’ could for example be through a name. ‘Indirectly’ refers to the situation where you can still be identified without your name through or by combining other information. An example of ‘indirectly’ is an IP-address.

When you register with us through the Site or Application and when you choose to serve as a host or book as a traveller, or when you wish to contact another visitor via our Site, we will ask you for personal data that can identify you and be used to contact you ("Identity Information"). Identity Information includes, but is not limited to; your name, phone number, email address, home address, but does not include your credit card number or banking information.

In regards to this policy, the terms "using" and "collecting" information in this Privacy Policy include but are not limited to; the use of cookies; and the collection, storing, transfer, evaluation, deletion, disclosure, management, handling, modifying and use of personal data.

This Privacy Policy applies only to personal data that you provide to us via the Site and the Application. We reserve the right to update this Privacy Policy from time to time to reflect any changes to our services. We will do this by amending the Privacy Policy on the Site. The changes will take effect automatically, as soon as they are posted on the Site. In addition, we will notify all users by email if any material changes are made to the Privacy Policy.


Personal information we collect and how we use it

We may collect your personal data for the following purposes:

Providing our services
Orma might collect your personal data to provide its services. For example, personal data is collected in order to set up your Orma account, allow you to book an event through, and submit reviews to the Site, App or third-party widgets.
For this purpose, Orma collectes the following personal data: name, phone number, email address, home address, IP address, Orma Account profile data.
Orma is allowed to collect personal data for this purpose because it is necessary for the execution of the contractual agreement with customers.

Customer service
Orma collectes personal data to handle questions, bookings and requests. This collecting is necessary to provide our services.
For this purpose, Orma collectes your name and email address and booking information.
Orma is allowed to collect personal data for this purpose because it is necessary for the legitimate interest of Orma (or a third party), essentially to enable Orma to adequately respond to questions and requests.

(Direct) marketing
Orma collectes personal data for (direct) marketing purposes. This means that Orma can contact customers to draw attention to our products.
For this purpose, Orma collectes the following personal data: website behaviour, IP address, email address, post address, phone number, online identifiers, booking information, location and account information.
Orma is allowed to collect personal data for this purpose when individuals have given consent or when Orma has a legitimate interest to collect the personal data. Depending on the ground of collecting (legitimate interest versus consent), you have the right to withdraw your consent at any time or have the right to object to the collecting of your personal data for direct marketing purposes at any time. The withdrawal or exercise of your right of objection shall not affect the lawfulness of collecting prior to the withdrawal or exercise of the right of objection.

Third party SDK's
Orma enables usage of sign up through third party SDK's such as Facebook login and Google login. As such, we are compliant with their privacy statements in addition to the above. For more information visit these pages for in-depth information:

We value flexible volunteering, and everyone is included with any help they can offer;  be it consistent, long - term help or just a few hours - every good deed makes a difference.


Sharing and disclosure

It may be necessary for Orma to disclose your personal data whether by law, possibly in the context of litigation, legal collect and / or by request from public or governmental authorities within or outside of your country of residence. We may also disclose your personal information if we determine that disclosure is necessary or appropriate for purposes of law enforcement, national security or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable.
We will disclose any information about you to our insurance services providers if we consider it necessary in order to protect the property and rights of Orma or a third party, and / or to protect the safety of the public or any person.
In order to provide and improve our services, we will share information with third parties when needed.
If you make a booking, Orma will share the following information about you with the host: (i) your first and last name, and (ii) a link to your Orma Account. This information will enable the host to decide whether to confirm or reject the booking. When a booking is confirmed, we will also share your telephone number with the host. Under no circumstance is your billing information ever shared with a host.
We may employ third party companies and individuals to help improve or facilitate our service, to provide the service on our behalf, to perform Platform-related services, including but not limited to: maintenance services, fraud detection services, database management, web analytics, monitoring and evaluation services.
These third parties may have access to your personal information. If they do, your information is still protected by the terms of our Privacy Policy.
You can always withdraw you consent to the receipt of such communications by sending an email to



The website uses cookies. If you have any questions about our cookie usage, please contact Orma at or refer to our Cookie Policy


International transfer

Your personal information is only collected when an adequate level of protection can be provided.

Your personal information may be disclosed to third parties located outside the European Economic Area (“EEA”), mainly in the US. For such transfers, Orma relies on the EU-U.S. Privacy Shield to provide an adequate level of protection for the rights and freedoms of data subjects or Orma will take other measures considered adequate to guarantee a safe transfer of your personal data.


Your rights and how to exercise them

We respect the exercise of the rights you have in relation to the personal data we collect or use.

You can request access to or a copy of your personal data collected and collected by us. You may also request the rectification and removal of personal data or the restriction of the collecting of your personal data, if there is a reason for doing so. You also have the right to data portability. You also have the right to object to a collecting on grounds relating to your particular situation or against the collecting of your personal data for direct marketing purposes.

To exercise these rights, please contact our Privacy team via To prevent misuse, we may ask you to identify yourself. The law determines whether you can exercise a certain right in a given situation. You should therefore bear in mind that we are not always able to execute your right; at full.

Want to delete all your data? We're here to help.

Please contact our customer support team at or send an email directly to our data privacy team at



We take security very seriously.

Orma is very concerned with safeguarding your information. We take the appropriate technical and organisational measures to safeguard your personal data. The Site uses a reliable SSL Certificate to make sure your personal data does not fall into the wrong hands.

In the event of any breach of security Orma will make any legally required disclosures concerning the breach and the confidentiality, or integrity of your unencrypted electronically stored "personal data" to you via email or via a posting on the Site and Application without unreasonable delay in as far as it is consistent with any legitimate needs of law enforcement and any measures required to determine the scope of the breach and to safeguard the integrity of data.


Retention period

If you have any question or complaints about the collecting of your personal data, please send an e-mail to Our DPO will be happy to assist you. If you feel that your rights have been violated, you may also lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority ( For more information on the protection of personal data, please consult the website of the Autoriteit Persoonsgegevens.


Changes to this privacy policy

We reserve the right to modify this Privacy Policy at any time in accordance with applicable law. If we do so, we will post the revised Privacy Policy and update the “Last Updated” date at the top. In case of material changes, we will also provide you with notice of the modification by email at least thirty (30) days before the effective date. If you disagree with the revised Privacy Policy, you can cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective


Orma contact information

Orma, Vicolo Guerrieri 7, 72022 Brindisi (BR).

You can write us to

Improve Cities While Exploring Them

Download Orma for IOS and Android

apple app store logogoogle play logo